Skip to content
OpenAdvisories

Vendor

Saho

3 known vulnerabilities.

Products

ADM100 3 ADM-100FP 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-38029

    Saho ADM100&ADM-100FP - Arbitrary File Upload

    Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary sys…

    Saho ADM100 ADM-100FP
  • Critical 9.1
    CVE-2023-38028

    Saho ADM100&ADM-100FP - Broken Access Control

    Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt…

    Saho ADM-100FP ADM100